27 citations · 61 across the 13 of their papers we have counts for
14 papers
VFCFinder: Seamlessly Pairing Security Advisories and Patches
Trevor Dunlap, Elizabeth Lin, William Enck +1
Security advisories are the primary channel of communication for discovered vulnerabilities in open-source software, but they often lack crucial information. Specifically, 63% of v…
S3C2 Summit 2023-06: Government Secure Supply Chain Summit
William Enck, Yasemin Acar, Michel Cukier +3
Recent years have shown increased cyber attacks targeting less secure elements in the software supply chain and causing fatal damage to businesses and organizations. Past well-know…
S3C2 Summit 2023-02: Industry Secure Supply Chain Summit
Trevor Dunlap, Yasemin Acar, Michel Cucker +4
Recent years have shown increased cyber attacks targeting less secure elements in the software supply chain and causing fatal damage to businesses and organizations. Past well-know…
S3C2 Summit 2202-09: Industry Secure Suppy Chain Summit
Mindy Tran, Yasemin Acar, Michel Cucker +4
Recent years have shown increased cyber attacks targeting less secure elements in the software supply chain and causing fatal damage to businesses and organizations. Past well-know…
PolyScope: Multi-Policy Access Control Analysis to Triage Android Scoped Storage
Yu-Tsung Lee, Haining Chen, William Enck +5
Android's filesystem access control is a crucial aspect of its system integrity. It utilizes a combination of mandatory access controls, such as SELinux, and discretionary access c…
PolyScope: Multi-Policy Access Control Analysis to Triage Android Systems
Yu-Tsung Lee, William Enck, Haining Chen +6
Android filesystem access control provides a foundation for Android system integrity. Android utilizes a combination of mandatory (e.g., SEAndroid) and discretionary (e.g., UNIX pe…
Role-Based Deception in Enterprise Networks
Iffat Anjum, Mu Zhu, Isaac Polinsky +3
Historically, enterprise network reconnaissance is an active process, often involving port scanning. However, as routers and switches become more complex, they also become more sus…
LeakyPick: IoT Audio Spy Detector
Richard Mitev, Anna Pazii, Markus Miettinen +2
Manufacturers of smart home Internet of Things (IoT) devices are increasingly adding voice assistant and audio monitoring features to a wide range of devices including smart speake…
Optimizing Vulnerability-Driven Honey Traffic Using Game Theory
Iffat Anjum, Mohammad Sujan Miah, Mu Zhu +4
Enterprises are increasingly concerned about adversaries that slowly and deliberately exploit resources over the course of months or even years. A key step in this kill chain is ne…
n-m-Variant Systems: Adversarial-Resistant Software Rejuvenation for Cloud-Based Web Applications
Isaac Polinsky, Kyle Martin, William Enck +1
Web servers are a popular target for adversaries as they are publicly accessible and often vulnerable to compromise. Compromises can go unnoticed for months, if not years, and reco…
ACMiner: Extraction and Analysis of Authorization Checks in Android's Middleware
Sigmund Albert Gorski, Benjamin Andow, Adwait Nadkarni +4
Billions of users rely on the security of the Android platform to protect phones, tablets, and many different types of consumer electronics. While Android's permission model is wel…
Policy by Example: An Approach for Security Policy Specification
Adwait Nadkarni, William Enck, Somesh Jha +1
Policy specification for personal user data is a hard problem, as it depends on many factors that cannot be predetermined by system developers. Simultaneously, systems are increasi…
SandBlaster: Reversing the Apple Sandbox
Răzvan Deaconescu, Luke Deshotels, Mihai Bucicoiu +3
In order to limit the damage of malware on Mac OS X and iOS, Apple uses sandboxing, a kernel-level security layer that provides tight constraints for system calls. Particularly use…
An Application Package Configuration Approach to Mitigating Android SSL Vulnerabilities
Vasant Tendulkar, William Enck
Computing platforms such as smartphones frequently access Web content using many separate applications rather than a single Web browser application. These applications often deal w…